CVE-2019-14885CWE-532

A flaw was found in the JBoss EAP Vault system in all versions before 7.2.6.GA

Medium · published January 23, 2020

CVSS v3.0
5.4
EPSS
1%
Percentile
54.1
In the wild
Unconfirmed
What it is

A flaw was found in the JBoss EAP Vault system in all versions before 7.2.6.GA. Confidential information of the system property's security attribute value is revealed in the JBoss EAP log file when executing a JBoss CLI 'reload' command. This flaw can lead to the exposure of confidential information.

The record
Technical detail
CVSS v3.0
5.4 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00742 · 54.1th percentile
Weakness
CWE-532 · Insertion of Sensitive Information into Log File
Published
2020-01-23T00:00Z
EPSS history
Timeline
  • 23 JAN 00:00Z
    A flaw was found in the JBoss EAP Vault system in all versions before 7.2.6.GA
    cvelistv5